Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:7390
HistoryAug 30, 2018 - 8:45 a.m.

Denial Of Service (DoS)

2018-08-3008:45:21
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
15

EPSS

0.007

Percentile

79.9%

chocolatey is vulnerable to denial of service (DoS) attacks. The library uses an outdated version of the 7zip application that is affected by CVE-2017-17969, causing a heap based buffer overflow when it processes certain zip files, crashing the application or executing arbitrary code. This vulnerability only affects window systems.